Skip to content
OpenAdvisories

Package · Go

github.com/shi-gg/linkdave

1 known vulnerabilities.

1 result · Feed

  • Critical —

    Linkdave Missing Authentication on REST and WebSocket endpoints

    The `linkdave` server does not enforce authentication on its REST and WebSocket routes in versions prior to `0.1.5`. ### Impact An attacker with network access to the server port can: - Connect to the WebSocket endpoint (`/ws`) and receive a valid `session_id…